Skip to content

Xample33/cvehunter

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

cvehunter_logo

CVEHunter - Async python wrapper for CVE/CPE data

Ruff PyPI - Version PyPI - Python Version PyPI - Downloads

CVEHunter is a Python asynchronous library designed to simplify the retrieval of CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) information using the NVD API. It streamlines the process of searching for and accessing valuable security data for vulnerability assessment and management.

Installation

pip3 install cvehunter

Example

Code:

import asyncio
from cvehunter import CveHunter

async def test() -> None:
    ch = CveHunter()
    
    cve = await ch.search_by_cve("CVE-2023-41991")
    
    print(cve.cve_id)
    print(cve.cwe_id)
    print(cve.description)
    print(cve.cvss_v3)
    print(cve.references)
    
asyncio.run(test())

Output:

CVE-2023-41991
CWE-295
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app [...]
{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N', 'severity': 'MEDIUM', 'version': 3.1, 'exploitability': 1.8, 'impact': 3.6}
['http://seclists.org/fulldisclosure/2023/Oct/5', 'https://support.apple.com/en-us/HT213927', 'https://support.apple.com/en-us/HT213931']

Documentation

The documentation is hosted on readthedocs, check it here

TODO

  • Change history
  • Better filters

Contributing

Contributions are welcome! If you'd like to contribute to CVEHunter, please follow the guidelines outlined in the Contributing Guide.

License

This project is licensed under the MIT License.

☆ If you like the project, please leave a star, is free!